docs(skill): pin the upstream digest for revert comparisons, and note layer whiteouts

Both raised in review of #3028: with build_from :latest a revert only
discriminates when both builds resolve the same upstream image, and plain tar
does not process OCI whiteouts when reconstructing a rootfs from layers.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

.claude/skills/hassio-addon-workflow/references/evidence.md

@@ -58,3 +58,60 @@ Once the rebuilt add-on is running, re-run the measurement that motivated the wo
 cannot be self-verified — a service that reads its environment only at start makes an env-var fix
 unproven until the add-on restarts, which needs the user or `ha-cli` with their agreement. If you
 cannot restart, the change is **Assumed**, not Verified, and must be reported that way.
+
+## A local reproduction that passes does not outrank a user's production report
+
+PR #3026 added an nginx `sub_filter` to the `filebrowser_quantum` ingress vhost. After it merged,
+the user reported that Download had stopped working — the file opened inline instead. Every check
+run against the change came back clean:
+
+- the shipped bundle's Download action builds an `<a href>` and clicks it, and never calls
+  `window.open`, which is all the injected shim overrides;
+- the shim's own predicate, evaluated live in the running app, returned false for the download
+  URL, the `inline=true` raw URL and the public-share download URL;
+- the download response through the vhost was **byte-identical** with and without the `sub_filter`
+  (`Content-Disposition: attachment` intact, `Content-Length` unchanged), for `text/plain` and for
+  the `text/html` case the filter actually scans;
+- upstream's frontend download code is unchanged from v1.5.0-stable to v1.5.4-stable, and Home
+  Assistant's ingress iframe carries no `sandbox` attribute (`ha-panel-app.ts`), so downloads are
+  not sandbox-blocked either.
+
+None of that reproduced the failure, and none of it explained the one fact that mattered: the user
+saw it fail under ingress and work on the add-on's direct port, and the `sub_filter` was the only
+ingress-side change in that update. **Revert first and keep investigating.**
+
+A revert can also discriminate — if the symptom survives it, the cause was the concurrent upstream
+bump rather than the diff — but only if **both builds resolve the same upstream image**. With
+`build_from: <image>:latest` they need not: `latest` can move between the two rebuilds, and then
+the comparison proves nothing. Resolve the tag to a digest and record it before and after, or pin
+`build_from` to that digest for the duration of the experiment:
+
+```bash
+T=$(curl -s "https://auth.docker.io/token?service=registry.docker.io&scope=repository:<repo>:pull" | jq -r .token)
+curl -s -H "Authorization: Bearer $T" \
+     -H "Accept: application/vnd.oci.image.index.v1+json" \
+     "https://registry-1.docker.io/v2/<repo>/manifests/latest" \
+  | jq -r '.manifests[] | select(.platform.architecture=="amd64" and .platform.os=="linux") | .digest'
+```
+
+For the case above both builds resolved `gtstef/filebrowser:latest` amd64 to
+`sha256:e549e1a9b5de573c276f7be67444841559e3f89cbc664a2f926968453d069436` (v1.5.4-stable, created
+2026-08-29T14:19:56Z), so that comparison was controlled — but it was luck, not design.
+
+Worth building next time, because it took most of the session and is reusable: a reproduction rig
+made **out of the published image's own layers**, with no dockerd. Pull the manifest and blobs from
+the registry with `curl` + `jq`, untar them in order, then run the extracted binary through the
+image's own musl loader (`root/lib/ld-musl-x86_64.so.1 ./filebrowser`) with the real `http/dist`
+next to it. Plain `tar` does not interpret whiteouts, so a file a later layer deletes
+(`.wh.<name>`) or a directory it marks opaque (`.wh..wh..opq`) survives into the reconstructed
+rootfs; check with `tar tzf <layer> | grep '\.wh\.'` and reach for an OCI-aware unpacker if any
+turn up. (There were none in `gtstef/filebrowser:latest` — all eleven layers, 0 whiteout entries —
+so that rig was faithful.) Put the add-on's rendered `ingress.conf` in front of it, and a second nginx server in
+front of that to strip the `/api/hassio_ingress/<token>` prefix the way Supervisor does. That gets
+the real frontend, the real backend and the real vhost under a browser — everything except
+Supervisor itself.
+
+**`build_from: <image>:latest` means every merge ships an upstream version bump too.** Record which
+upstream version each add-on image was built from — the registry config blob's `created` timestamp,
+the resolved manifest digest, and the binary's version string — before attributing a regression to
+the diff.

.claude/skills/hassio-addon-workflow/references/traps.md

@@ -163,6 +163,26 @@ the running image (`command -v <tool>`), and cross-check `/var/log/apt/history.l
 matching `apt-get install` line. An `if` block whose condition never matched leaves no trace and
 no error — one such block sat dead for weeks while appearing to guarantee driver verification.
 
+**Adding a build stage above `ARG BUILD_FROM` breaks the final `FROM`.** Global build args must
+be declared *before the first* `FROM` in the file; an `ARG` that follows one belongs to that stage
+only. Inserting a tools stage at the top of an add-on Dockerfile therefore demotes the
+`ARG BUILD_FROM` below it, and the final `FROM ${BUILD_FROM}` expands empty:
+`failed to solve: base name (${BUILD_FROM}) should not be blank`. Move `ARG BUILD_FROM` (and
+`ARG BUILD_VERSION`) above the new stage. `netalertx` does not hit this only because it hardcodes
+its base image instead of using `${BUILD_FROM}` — do not copy its ordering blindly
+(PR #3024).
+
+**A base image can lose its package manager between upstream releases.** Zoraxy v3.3.4 added
+`/sbin/apk` to the upstream cleanup step, so `ha_automodules.sh` failed with
+`apt-get: not found / apk: not found` (exit 127) on both architectures. The removal deleted only
+the binary — `/etc/apk` (repositories, keys, world) and `/lib/apk/db` survived, confirmed by a
+single `sbin/.wh.apk` whiteout in the layer — so copying `apk.static` from an
+`apk-tools-static` build stage restores package management in one line. Diff the upstream image
+configs across the two tags (`.history[].created_by` from the registry config blob) before
+theorising; it names the changed step exactly. Note `build_from` is often a floating `:latest`
+tag, so the builder's revert-on-failure does **not** restore a working build — the next rebuild
+fails identically until the Dockerfile is fixed (PR #3024).
+
 **Don't test for distro-specific filenames.** A guard on
 `/usr/share/vulkan/icd.d/intel_icd.x86_64.json` named a file Debian does not ship (it installs
 `intel_icd.json`), so fixing the arch variable alone would have turned dead code into a failing

.github/stargazer_countries.csv

@@ -273,6 +273,7 @@ Gajalshankar,India,
 Gangol,,2026-08-10
 Garak1980,,2026-08-10
 GaryOG,,2026-08-10
+GentryChe,,2026-08-30
 Germaenace,,2026-08-10
 Getrio,Italy,
 Ghost-Sam1222,,2026-08-10
@@ -385,6 +386,7 @@ JosephBlock,United States,
 Julian1701,,2026-08-10
 JulienFloris,Netherlands,
 JuraLadanov,,2026-08-10
+Jutsch,,2026-08-30
 K0stIa,,2026-08-10
 KRC604,,2026-08-10
 KairuByte,,2026-08-10
@@ -441,6 +443,7 @@ Lizzardis,,2026-08-10
 LoginByCall,,2026-08-10
 Lolekpolek,,2026-08-10
 LonelySoul7X,,2026-08-10
+Loong-He,China,2026-08-30
 Lorsel,Italy,
 Luca2165801154,,2026-08-10
 Lucius-Waverly,,2026-08-16
@@ -990,6 +993,7 @@ berkovich98,,2026-08-10
 bertrand-f,,2026-08-10
 bes-r,Netherlands,
 bestnub,Germany,
+betechyou,,2026-08-30
 beyercenter,,2026-08-10
 bezigebever,,2026-08-10
 bggsolar,Germany,
@@ -1225,6 +1229,7 @@ denisgolius,Ukraine,
 dennisjonda,Germany,
 dennisvandalen,Netherlands,
 denvernbd,Russian Federation,2026-08-10
+der-berni,Germany,2026-08-30
 derailius,,2026-08-10
 dethpickle,United States,
 dev4jam,Australia,
@@ -1522,6 +1527,7 @@ hreikin,United Kingdom,
 hsiguy,,2026-08-10
 huangyixinv,,2026-08-10
 hubikj,,2026-08-10
+hufforguk,,2026-08-30
 hugobloem,United Kingdom,
 hujiayi0126,,2026-08-10
 hunterlong,United States,
@@ -1661,6 +1667,7 @@ joshcliffejones,United Kingdom,
 joshmeads,Canada,
 josiah-eichelman,,2026-08-10
 jpaulomt,,
+jpeisach,United States,2026-08-30
 jpmaldonado,,2026-08-10
 jpoll962,,2026-08-10
 jpombas,Portugal,
@@ -1831,6 +1838,7 @@ mProwler,United States,
 mStrangers,,2026-08-10
 mabt,,2026-08-10
 macedobernardo,,2026-08-10
+machineGnu,,2026-08-30
 madjetey,,2026-08-10
 maggle-swim,,2026-08-10
 malachitgruen,Germany,
@@ -1840,6 +1848,7 @@ manu7691,United States,
 manugratx,,2026-08-10
 mapeje,Sweden,
 maphouse,Canada,
+marat-365,,2026-08-30
 maratbakirov,,2026-08-10
 marcetad,,2026-08-10
 marcjay,United Kingdom,
@@ -1849,6 +1858,7 @@ marcschraepler,Austria,
 marcusrbrown,,2026-08-10
 mareklab,,2026-08-10
 marevers,Germany,
+marialaranjo,,2026-08-30
 marian-paun,Romania,
 mariusvslprts,Germany,
 mark-219,United States,2026-08-16
@@ -2173,6 +2183,7 @@ pwitte,,2026-08-10
 pxshh,,2026-08-10
 pynbbz,,2026-08-10
 pyrech,France,
+pysj,,2026-08-30
 pziezio,Poland,
 pzkpfw6,,2026-08-10
 qadk,,2026-08-10
@@ -2196,6 +2207,7 @@ rascasseuk,,2026-08-10
 raul811,,2026-08-10
 raulpetruta,Romania,
 rawpie2,,2026-08-10
+raymand211092,Cuba,2026-08-30
 raytedjaja,,2026-08-10
 rbalaev,,2026-08-10
 rbaron,,2026-08-10
@@ -2211,6 +2223,7 @@ reggiano,,2026-08-10
 reid,United States,
 reinvanhaaren,Netherlands,
 remb0,Netherlands,
+renatoptr,,2026-08-30
 renejr63,,2026-08-10
 resomi,,2026-08-10
 retpolanne,Brazil,

aurral/CHANGELOG.md

@@ -1,4 +1,7 @@
  
+## 2.7.0 (2026-08-29)
+- Update to latest version from lklynet/aurral (changelog : https://github.com/lklynet/aurral/releases)
+ 
 ## 2.5.1 (2026-08-22)
 - Update to latest version from lklynet/aurral (changelog : https://github.com/lklynet/aurral/releases)
  

aurral/config.yaml

@@ -1,5 +1,5 @@
 name: Aurral
-version: "2.5.1"
+version: "2.7.0"
 slug: aurral
 description: >-
   Self-hosted music discovery, request management, flows, and playlist

aurral/updater.json

@@ -1,9 +1,9 @@
 {
-  "last_update": "2026-08-22",
+  "last_update": "2026-08-29",
   "repository": "alexbelgium/hassio-addons",
   "slug": "aurral",
   "source": "github",
   "upstream_repo": "lklynet/aurral",
-  "upstream_version": "2.5.1",
+  "upstream_version": "2.7.0",
   "github_beta": false
 }

autobrr/CHANGELOG.md

@@ -1,4 +1,7 @@
  
+## 1.85.0 (2026-08-29)
+- Update to latest version from autobrr/autobrr (changelog : https://github.com/autobrr/autobrr/releases)
+ 
 ## 1.84.0 (2026-08-15)
 - Update to latest version from autobrr/autobrr (changelog : https://github.com/autobrr/autobrr/releases)
  

autobrr/Dockerfile

@@ -16,7 +16,7 @@
 
 ARG BUILD_FROM
 ARG BUILD_VERSION
-ARG BUILD_UPSTREAM="1.84.0"
+ARG BUILD_UPSTREAM="1.85.0"
 FROM ${BUILD_FROM}
 
 ##################

autobrr/config.yaml

@@ -108,4 +108,4 @@ schema:
 slug: autobrr
 udev: true
 url: https://github.com/alexbelgium/hassio-addons/tree/master/autobrr
-version: "1.84.0"
+version: "1.85.0"

autobrr/updater.json

@@ -1,8 +1,8 @@
 {
-  "last_update": "2026-08-15",
+  "last_update": "2026-08-29",
   "repository": "alexbelgium/hassio-addons",
   "slug": "autborr",
   "source": "github",
   "upstream_repo": "autobrr/autobrr",
-  "upstream_version": "1.84.0"
+  "upstream_version": "1.85.0"
 }

birdnet-go-dev/CHANGELOG.md

@@ -1,3 +1,9 @@
+## 20260829.2 (29-08-2026)
+- Minor bugs fixed
+## 20260829.1 (29-08-2026)
+- Minor bugs fixed
+## 20260829 (29-08-2026)
+- Minor bugs fixed
 ## 20260828.2 (28-08-2026)
 - Synced with upstream birdnet-go; fork PR #57 updated
 ## 20260828.1 (28-08-2026)

birdnet-go-dev/config.yaml

@@ -127,5 +127,5 @@ slug: birdnet-go-dev
 udev: true
 url: https://github.com/alexbelgium/hassio-addons
 usb: true
-version: "20260828.2"
+version: "20260829.2"
 video: true

birdnet-go/CHANGELOG.md

@@ -1,3 +1,7 @@
+ 
+## 20260827 (2026-08-29)
+- Update to latest version from tphakala/birdnet-go (changelog : https://github.com/tphakala/birdnet-go/releases)
+- Upstream tag : 20260823
 ## 20260826 (26-08-2026)
 - Minor bugs fixed
 ## 20260716.1 (26-08-2026)

birdnet-go/config.yaml

@@ -128,4 +128,4 @@ slug: birdnet-go
 udev: true
 url: https://github.com/alexbelgium/hassio-addons/tree/master/birdnet-go
 usb: true
-version: "20260826"
+version: "20260827"

birdnet-go/updater.json

@@ -2,10 +2,10 @@
   "github_beta": true,
   "github_exclude": "-4",
   "github_fulltag": true,
-  "last_update": "2026-07-16",
+  "last_update": "2026-08-29",
   "repository": "alexbelgium/hassio-addons",
   "slug": "birdnet-go",
   "source": "github",
   "upstream_repo": "tphakala/birdnet-go",
-  "upstream_version": "20260716"
+  "upstream_version": "20260823"
 }

bitwarden/CHANGELOG.md

@@ -1,4 +1,7 @@
  
+## 1.37.2 (2026-08-29)
+- Update to latest version from dani-garcia/bitwarden_rs (changelog : https://github.com/dani-garcia/bitwarden_rs/releases)
+ 
 ## 1.37.1 (2026-08-01)
 - Update to latest version from dani-garcia/bitwarden_rs (changelog : https://github.com/dani-garcia/bitwarden_rs/releases)
  

bitwarden/config.yaml

@@ -28,5 +28,5 @@ schema:
 slug: bitwarden
 udev: true
 url: https://github.com/alexbelgium/hassio-addons/tree/master/bitwarden
-version: "1.37.1"
+version: "1.37.2"
 webui: "[PROTO:ssl]://[HOST]:[PORT:7277]"

bitwarden/updater.json

@@ -1,9 +1,9 @@
 {
-  "last_update": "2026-08-01",
+  "last_update": "2026-08-29",
   "paused": false,
   "repository": "alexbelgium/hassio-addons",
   "slug": "bitwarden",
   "source": "github",
   "upstream_repo": "dani-garcia/bitwarden_rs",
-  "upstream_version": "1.37.1"
+  "upstream_version": "1.37.2"
 }

browser_brave/CHANGELOG.md

@@ -1,4 +1,7 @@
  
+## 1.94.117-ls125 (2026-08-29)
+- Update to latest version from linuxserver/docker-brave (changelog : https://github.com/linuxserver/docker-brave/releases)
+ 
 ## 1.93.138-ls124 (2026-08-22)
 - Update to latest version from linuxserver/docker-brave (changelog : https://github.com/linuxserver/docker-brave/releases)
  

browser_brave/config.yaml

@@ -69,5 +69,5 @@ slug: brave
 tmpfs: true
 udev: true
 url: https://github.com/alexbelgium/hassio-addons
-version: "1.93.138-ls124"
+version: "1.94.117-ls125"
 video: true

browser_brave/updater.json

@@ -1,9 +1,9 @@
 {
   "github_fulltag": "true",
-  "last_update": "2026-08-22",
+  "last_update": "2026-08-29",
   "repository": "alexbelgium/hassio-addons",
   "slug": "brave",
   "source": "github",
   "upstream_repo": "linuxserver/docker-brave",
-  "upstream_version": "1.93.138-ls124"
+  "upstream_version": "1.94.117-ls125"
 }

calibre/CHANGELOG.md

@@ -1,4 +1,7 @@
  
+## 9.14.0 (2026-08-29)
+- Update to latest version from linuxserver/docker-calibre (changelog : https://github.com/linuxserver/docker-calibre/releases)
+ 
 ## 9.13.0 (2026-08-08)
 - Update to latest version from linuxserver/docker-calibre (changelog : https://github.com/linuxserver/docker-calibre/releases)
  

calibre/config.yaml

@@ -117,5 +117,5 @@ schema:
 slug: calibre
 udev: true
 url: https://github.com/alexbelgium/hassio-addons/tree/master/calibre
-version: "9.13.0"
+version: "9.14.0"
 video: true

calibre/updater.json

@@ -1,9 +1,9 @@
 {
   "github_fulltag": "false",
-  "last_update": "2026-08-08",
+  "last_update": "2026-08-29",
   "repository": "alexbelgium/hassio-addons",
   "slug": "calibre",
   "source": "github",
   "upstream_repo": "linuxserver/docker-calibre",
-  "upstream_version": "9.13.0"
+  "upstream_version": "9.14.0"
 }

claude_desktop/CHANGELOG.md

@@ -1,4 +1,8 @@
  
+## 07308545.5 (2026-08-29)
+- Update to latest version from aaddrick/claude-desktop-debian (changelog : https://github.com/aaddrick/claude-desktop-debian/releases)
+- Upstream tag : v3.2.2+claude1.37937.3
+ 
 ## 07308545.4 (2026-08-22)
 - Update to latest version from aaddrick/claude-desktop-debian (changelog : https://github.com/aaddrick/claude-desktop-debian/releases)
 - Upstream tag : v3.2.2+claude1.32885.1

claude_desktop/config.yaml

@@ -136,5 +136,5 @@ schema:
 slug: claude_desktop
 udev: true
 url: https://github.com/alexbelgium/hassio-addons
-version: "07308545.4"
+version: "07308545.5"
 video: true

claude_desktop/updater.json

@@ -4,6 +4,6 @@
   "github_fulltag": true,
   "slug": "claude_desktop",
   "paused": false,
-  "upstream_version": "v3.2.2+claude1.32885.1",
-  "last_update": "2026-08-22"
+  "upstream_version": "v3.2.2+claude1.37937.3",
+  "last_update": "2026-08-29"
 }

cloudcommander/CHANGELOG.md

@@ -1,4 +1,7 @@
  
+## 19.20.4 (2026-08-29)
+- Update to latest version from coderaiser/cloudcmd (changelog : https://github.com/coderaiser/cloudcmd/releases)
+ 
 ## 19.20.0 (2026-08-08)
 - Update to latest version from coderaiser/cloudcmd (changelog : https://github.com/coderaiser/cloudcmd/releases)
  

cloudcommander/config.yaml

@@ -104,4 +104,4 @@ schema:
 slug: cloudcommander
 udev: true
 url: https://github.com/alexbelgium/hassio-addons/tree/master/cloudcommander
-version: "19.20.0"
+version: "19.20.4"

cloudcommander/updater.json

@@ -1,8 +1,8 @@
 {
-  "last_update": "2026-08-08",
+  "last_update": "2026-08-29",
   "repository": "alexbelgium/hassio-addons",
   "slug": "cloudcommander",
   "source": "github",
   "upstream_repo": "coderaiser/cloudcmd",
-  "upstream_version": "19.20.0"
+  "upstream_version": "19.20.4"
 }

codex/CHANGELOG.md

@@ -1,4 +1,7 @@
  
+## 2.2.11 (2026-08-29)
+- Update to latest version from ajslater/codex (changelog : https://github.com/ajslater/codex/releases)
+ 
 ## 2.2.8 (2026-08-22)
 - Update to latest version from ajslater/codex (changelog : https://github.com/ajslater/codex/releases)
  

codex/config.yaml

@@ -101,4 +101,4 @@ schema:
 slug: codex
 udev: true
 url: https://github.com/alexbelgium/hassio-addons
-version: "2.2.8"
+version: "2.2.11"

codex/updater.json

@@ -1,9 +1,9 @@
 {
   "github_beta": "true",
-  "last_update": "2026-08-22",
+  "last_update": "2026-08-29",
   "repository": "alexbelgium/hassio-addons",
   "slug": "codex",
   "source": "github",
   "upstream_repo": "ajslater/codex",
-  "upstream_version": "2.2.8"
+  "upstream_version": "2.2.11"
 }

comicarr/CHANGELOG.md

@@ -1,3 +1,6 @@
+ 
+## 0.38.2 (2026-08-29)
+- Update to latest version from frankieramirez/comicarr (changelog : https://github.com/frankieramirez/comicarr/releases)
 ## 0.34.0 (20-08-2026)
 - Initial release, based on upstream frankieramirez/comicarr 0.34.0 (changelog : https://github.com/frankieramirez/comicarr/releases)
 - Home Assistant ingress support through a bundled nginx reverse proxy

comicarr/Dockerfile

@@ -16,7 +16,7 @@
 
 ARG BUILD_FROM
 ARG BUILD_VERSION
-ARG BUILD_UPSTREAM="0.34.0"
+ARG BUILD_UPSTREAM="0.38.2"
 FROM ghcr.io/frankieramirez/comicarr:${BUILD_UPSTREAM}
 
 ##################

comicarr/config.yaml

@@ -102,4 +102,4 @@ schema:
 slug: comicarr
 udev: true
 url: https://github.com/alexbelgium/hassio-addons/tree/master/comicarr
-version: "0.34.0"
+version: "0.38.2"

comicarr/updater.json

@@ -1,10 +1,10 @@
 {
   "github_beta": "false",
   "github_fulltag": false,
-  "last_update": "2026-08-20",
+  "last_update": "2026-08-29",
   "repository": "alexbelgium/hassio-addons",
   "slug": "comicarr",
   "source": "github",
   "upstream_repo": "frankieramirez/comicarr",
-  "upstream_version": "0.34.0"
+  "upstream_version": "0.38.2"
 }

emby_beta/CHANGELOG.md

@@ -1,4 +1,10 @@
  
+## 4.10.0.29 (2026-08-29)
+- Update to latest version from linuxserver/docker-emby (changelog : https://github.com/linuxserver/docker-emby/releases)
+ 
+## 4.10.0.28 (2026-08-29)
+- Update to latest version from linuxserver/docker-emby (changelog : https://github.com/linuxserver/docker-emby/releases)
+ 
 ## 4.10.0.26 (2026-08-22)
 - Update to latest version from linuxserver/docker-emby (changelog : https://github.com/linuxserver/docker-emby/releases)
  

emby_beta/Dockerfile

@@ -16,7 +16,7 @@
 
 ARG BUILD_FROM
 ARG BUILD_VERSION
-ARG BUILD_UPSTREAM="4.10.0.26"
+ARG BUILD_UPSTREAM="4.10.0.29"
 FROM ${BUILD_FROM}
 
 ##################

emby_beta/config.yaml

@@ -122,5 +122,5 @@ schema:
 slug: emby_nas
 udev: true
 url: https://github.com/alexbelgium/hassio-addons/tree/master/emby
-version: "4.10.0.26"
+version: "4.10.0.29"
 video: true

emby_beta/updater.json

@@ -1,9 +1,9 @@
 {
   "github_beta": "true",
-  "last_update": "2026-08-22",
+  "last_update": "2026-08-29",
   "repository": "alexbelgium/hassio-addons",
   "slug": "emby",
   "source": "github",
   "upstream_repo": "linuxserver/docker-emby",
-  "upstream_version": "4.10.0.26"
+  "upstream_version": "4.10.0.29"
 }

epicgamesfree/CHANGELOG.md

@@ -1,4 +1,8 @@
  
+## 2026.08.29 (2026-08-29)
+- Update to latest version from charlocharlie/epicgames-freegames
+- Upstream tag : debian-2026-08-29
+ 
 ## 2026.08.13 (2026-08-13)
 - Update to latest version from charlocharlie/epicgames-freegames
 - Upstream tag : debian-2026-08-13

epicgamesfree/config.yaml

@@ -88,5 +88,5 @@ schema:
 slug: epicgamesfree
 udev: true
 url: https://github.com/alexbelgium/hassio-addons
-version: "2026.08.13"
+version: "2026.08.29"
 webui: "[PROTO:ssl]://[HOST]:[PORT:3000]"

epicgamesfree/updater.json

@@ -2,10 +2,10 @@
   "dockerhub_by_date": true,
   "dockerhub_list_size": 2,
   "github_exclude": "-",
-  "last_update": "2026-08-13",
+  "last_update": "2026-08-29",
   "repository": "alexbelgium/hassio-addons",
   "slug": "epicgamesfree",
   "source": "dockerhub",
   "upstream_repo": "charlocharlie/epicgames-freegames",
-  "upstream_version": "debian-2026-08-13"
+  "upstream_version": "debian-2026-08-29"
 }

filebrowser_quantum/CHANGELOG.md

@@ -1,4 +1,23 @@
  
+## 1.5.3.2 (2026-08-30)
+- Revert the 1.5.3.1 ingress filter while a report of broken downloads is
+  investigated. "Open parent directory" in the tool views opens a new tab
+  again, as it did up to 1.5.3.
+ 
+## 1.5.3.1 (2026-08-29)
+- Fix "open parent directory" in Tools -> File Size Analyzer under Home
+  Assistant ingress. FileBrowser opened the parent folder in a new tab, which
+  lands on the raw ingress URL with no Home Assistant frontend around it to
+  keep the ingress session alive, so the new tab answered 401 instead of
+  showing the folder. The ingress vhost now turns that popup into a navigation
+  of the panel itself. The same fix covers the other tool views and the "go to
+  item" action on search results, which open a new tab the same way. Download
+  and preview popups, links pointing out of the add-on, and direct access on
+  port 8071 are unchanged.
+ 
+## 1.5.3 (2026-08-29)
+- Update to latest version from gtsteffaniak/filebrowser (changelog : https://github.com/gtsteffaniak/filebrowser/releases)
+ 
 ## 1.5.2 (2026-08-22)
 - Update to latest version from gtsteffaniak/filebrowser (changelog : https://github.com/gtsteffaniak/filebrowser/releases)
  

filebrowser_quantum/config.yaml

@@ -118,4 +118,4 @@ schema:
 slug: filebrowser_quantum
 udev: true
 url: https://github.com/alexbelgium/hassio-addons
-version: "1.5.2"
+version: "1.5.3.2"

filebrowser_quantum/updater.json

@@ -1,10 +1,10 @@
 {
   "github_beta": "false",
-  "last_update": "2026-08-22",
+  "last_update": "2026-08-29",
   "paused": false,
   "repository": "alexbelgium/hassio-addons",
   "slug": "filebrowser_quantum",
   "source": "github",
   "upstream_repo": "gtsteffaniak/filebrowser",
-  "upstream_version": "1.5.2"
+  "upstream_version": "1.5.3"
 }

flexget/CHANGELOG.md

@@ -1,4 +1,7 @@
  
+## 3.20.8 (2026-08-29)
+- Update to latest version from wiserain/flexget
+ 
 ## 3.20.6 (2026-08-22)
 - Update to latest version from wiserain/flexget
  

flexget/config.yaml

@@ -95,5 +95,5 @@ schema:
 slug: flexget
 udev: true
 url: https://github.com/alexbelgium/hassio-addons
-version: "3.20.6"
+version: "3.20.8"
 webui: "[PROTO:ssl]://[HOST]:[PORT:5050]"

flexget/updater.json

@@ -1,9 +1,9 @@
 {
   "dockerhub_list_size": "10",
-  "last_update": "2026-08-22",
+  "last_update": "2026-08-29",
   "repository": "alexbelgium/hassio-addons",
   "slug": "flexget",
   "source": "dockerhub",
   "upstream_repo": "wiserain/flexget",
-  "upstream_version": "3.20.6"
+  "upstream_version": "3.20.8"
 }

grampsweb/CHANGELOG.md

@@ -1,4 +1,7 @@
  
+## 26.8.1 (2026-08-29)
+- Update to latest version from gramps-project/gramps-web (changelog : https://github.com/gramps-project/gramps-web/releases)
+ 
 ## 26.8.0 (2026-08-15)
 - Update to latest version from gramps-project/gramps-web (changelog : https://github.com/gramps-project/gramps-web/releases)
  

grampsweb/config.yaml

@@ -115,5 +115,5 @@ services:
 slug: grampsweb
 tmpfs: true
 url: https://github.com/alexbelgium/hassio-addons/tree/master/grampsweb
-version: "26.8.0"
+version: "26.8.1"
 webui: "[PROTO:ssl]://[HOST]:[PORT:5001]"

grampsweb/updater.json

@@ -1,9 +1,9 @@
 {
   "github_beta": true,
-  "last_update": "2026-08-15",
+  "last_update": "2026-08-29",
   "repository": "alexbelgium/hassio-addons",
   "slug": "grampsweb",
   "source": "github",
   "upstream_repo": "gramps-project/gramps-web",
-  "upstream_version": "26.8.0"
+  "upstream_version": "26.8.1"
 }

grav/CHANGELOG.md

@@ -1,4 +1,7 @@
  
+## 2.0.21 (2026-08-29)
+- Update to latest version from linuxserver/docker-grav (changelog : https://github.com/linuxserver/docker-grav/releases)
+ 
 ## 2.0.20 (2026-08-22)
 - Update to latest version from linuxserver/docker-grav (changelog : https://github.com/linuxserver/docker-grav/releases)
  

grav/Dockerfile

@@ -16,7 +16,7 @@
 
 ARG BUILD_FROM
 ARG BUILD_VERSION
-ARG BUILD_UPSTREAM="2.0.20"
+ARG BUILD_UPSTREAM="2.0.21"
 FROM ${BUILD_FROM}
 
 ##################

grav/config.yaml

@@ -89,5 +89,5 @@ schema:
 slug: grav
 udev: true
 url: https://github.com/alexbelgium/hassio-addons
-version: "2.0.20"
+version: "2.0.21"
 webui: "[PROTO:ssl]://[HOST]:[PORT:80]"

grav/updater.json

@@ -1,9 +1,9 @@
 {
   "github_beta": false,
-  "last_update": "2026-08-22",
+  "last_update": "2026-08-29",
   "repository": "alexbelgium/hassio-addons",
   "slug": "grav",
   "source": "github",
   "upstream_repo": "linuxserver/docker-grav",
-  "upstream_version": "2.0.20"
+  "upstream_version": "2.0.21"
 }

jackett/CHANGELOG.md

@@ -1,4 +1,7 @@
  
+## 0.24.2486 (2026-08-29)
+- Update to latest version from linuxserver/docker-jackett (changelog : https://github.com/linuxserver/docker-jackett/releases)
+ 
 ## 0.24.2434 (2026-08-22)
 - Update to latest version from linuxserver/docker-jackett (changelog : https://github.com/linuxserver/docker-jackett/releases)
  

jackett/config.yaml

@@ -106,5 +106,5 @@ schema:
 slug: jackett_nas
 udev: true
 url: https://github.com/alexbelgium/hassio-addons/tree/master/jackett
-version: "0.24.2434"
+version: "0.24.2486"
 webui: http://[HOST]:[PORT:9117]

jackett/updater.json

@@ -1,8 +1,8 @@
 {
-  "last_update": "2026-08-22",
+  "last_update": "2026-08-29",
   "repository": "alexbelgium/hassio-addons",
   "slug": "jackett",
   "source": "github",
   "upstream_repo": "linuxserver/docker-jackett",
-  "upstream_version": "0.24.2434"
+  "upstream_version": "0.24.2486"
 }

maintainerr/CHANGELOG.md

@@ -1,4 +1,7 @@
  
+## 3.25.0 (2026-08-29)
+- Update to latest version from maintainerr/maintainerr (changelog : https://github.com/maintainerr/maintainerr/releases)
+ 
 ## 3.24.0 (2026-08-22)
 - Update to latest version from maintainerr/maintainerr (changelog : https://github.com/maintainerr/maintainerr/releases)
  

maintainerr/Dockerfile

@@ -11,7 +11,7 @@
 #=== Home Assistant Addon ===#
 
 # ARGs used in FROM must be declared before any FROM instruction
-ARG BUILD_UPSTREAM="3.24.0"
+ARG BUILD_UPSTREAM="3.25.0"
 
 ############################
 # 0) Tools stage           #

maintainerr/config.yaml

@@ -88,5 +88,5 @@ schema:
   TZ: str?
 slug: maintainerr
 url: https://github.com/alexbelgium/hassio-addons/tree/master/maintainerr
-version: "3.24.0"
+version: "3.25.0"
 webui: "[PROTO:ssl]://[HOST]:[PORT:6246]"

maintainerr/updater.json

@@ -1,8 +1,8 @@
 {
-  "last_update": "2026-08-22",
+  "last_update": "2026-08-29",
   "repository": "alexbelgium/hassio-addons",
   "slug": "maintainerr",
   "source": "github",
   "upstream_repo": "maintainerr/maintainerr",
-  "upstream_version": "3.24.0"
+  "upstream_version": "3.25.0"
 }

manyfold/CHANGELOG.md

@@ -1,4 +1,7 @@
  
+## 0.148.0 (2026-08-29)
+- Update to latest version from manyfold3d/manyfold (changelog : https://github.com/manyfold3d/manyfold/releases)
+ 
 ## 0.147.2 (2026-08-15)
 - Update to latest version from manyfold3d/manyfold (changelog : https://github.com/manyfold3d/manyfold/releases)
  

manyfold/config.yaml

@@ -1,7 +1,7 @@
 name: "Manyfold"
 slug: manyfold
 description: "Manyfold 3D model manager as a Home Assistant add-on, using the upstream image with configurable library/index paths."
-version: "0.147.2"
+version: "0.148.0"
 url: "https://github.com/alexbelgium/hassio-addons/tree/master/manyfold"
 image: ghcr.io/alexbelgium/manyfold-{arch}
 arch:

manyfold/updater.json

@@ -1,9 +1,9 @@
 {
   "github_fulltag": "false",
-  "last_update": "2026-08-15",
+  "last_update": "2026-08-29",
   "repository": "alexbelgium/hassio-addons",
   "slug": "manyfold",
   "source": "github",
   "upstream_repo": "manyfold3d/manyfold",
-  "upstream_version": "0.147.2"
+  "upstream_version": "0.148.0"
 }

mealie/CHANGELOG.md

@@ -1,4 +1,7 @@
  
+## v3.24.0 (2026-08-29)
+- Update to latest version from mealie-recipes/mealie (changelog : https://github.com/mealie-recipes/mealie/releases)
+ 
 ## v3.23.1 (2026-08-22)
 - Update to latest version from mealie-recipes/mealie (changelog : https://github.com/mealie-recipes/mealie/releases)
  

mealie/Dockerfile

@@ -21,7 +21,7 @@ FROM node:22 AS frontend-builder
 ARG SUB_PATH="/mealie/"
 ENV SUB_PATH=$SUB_PATH
 
-ENV MEALIE_VERSION="v3.23.1"
+ENV MEALIE_VERSION="v3.24.0"
 
 # Clone the Mealie repository to get the frontend source code
 WORKDIR /frontend

mealie/config.yaml

@@ -114,4 +114,4 @@ schema:
 slug: mealie
 udev: true
 url: https://github.com/alexbelgium/hassio-addons
-version: "v3.23.1"
+version: "v3.24.0"

mealie/updater.json

@@ -1,11 +1,11 @@
 {
   "github_beta": "true",
   "github_fulltag": "true",
-  "last_update": "2026-08-22",
+  "last_update": "2026-08-29",
   "paused": "false",
   "repository": "alexbelgium/hassio-addons",
   "slug": "mealie",
   "source": "github",
   "upstream_repo": "mealie-recipes/mealie",
-  "upstream_version": "v3.23.1"
+  "upstream_version": "v3.24.0"
 }

nzbget/CHANGELOG.md

@@ -1,4 +1,8 @@
  
+## v26.3.261 (2026-08-29)
+- Update to latest version from linuxserver/docker-nzbget (changelog : https://github.com/linuxserver/docker-nzbget/releases)
+- Upstream tag : v26.3-ls261
+ 
 ## v26.2.260 (2026-08-22)
 - Update to latest version from linuxserver/docker-nzbget (changelog : https://github.com/linuxserver/docker-nzbget/releases)
 - Upstream tag : v26.2-ls260

nzbget/config.yaml

@@ -104,4 +104,4 @@ schema:
 slug: nzbget
 udev: true
 url: https://github.com/alexbelgium/hassio-addons
-version: "v26.2.260"
+version: "v26.3.261"

nzbget/updater.json

@@ -1,9 +1,9 @@
 {
   "github_fulltag": "true",
-  "last_update": "2026-08-22",
+  "last_update": "2026-08-29",
   "repository": "alexbelgium/hassio-addons",
   "slug": "nzbget",
   "source": "github",
   "upstream_repo": "linuxserver/docker-nzbget",
-  "upstream_version": "v26.2-ls260"
+  "upstream_version": "v26.3-ls261"
 }

portainer/CHANGELOG.md

@@ -1,4 +1,7 @@
  
+## 2.45.0 (2026-08-29)
+- Update to latest version from portainer/portainer (changelog : https://github.com/portainer/portainer/releases)
+ 
 ## 2.44.0.1 (2026-08-05)
 - Ingress: request uncompressed responses from Portainer so they carry a Content-Length and stay on the Home Assistant relay's buffered path. Portainer compresses its own responses, and the Accept-Encoding strip in proxy_params.conf never applied because the location block declares its own proxy_set_header directives, which makes nginx discard the server-level ones. Partial mitigation for #2766: the page itself and all assets under 4 MB are now buffered, but the two large JavaScript bundles still exceed the relay's 4 MB buffering threshold. Direct access on the web UI port keeps compression
  

portainer/Dockerfile

@@ -31,7 +31,7 @@ ENV S6_CMD_WAIT_FOR_SERVICES=1 \
 SHELL ["/bin/bash", "-o", "pipefail", "-c"]
 
 # Setup base
-ARG BUILD_UPSTREAM="2.44.0"
+ARG BUILD_UPSTREAM="2.45.0"
 
 # spellcheck disable=SC2015
 # hadolint ignore=SC2015

portainer/config.yaml

@@ -42,4 +42,4 @@ schema:
 slug: portainer
 udev: true
 url: https://github.com/alexbelgium/hassio-addons
-version: "2.44.0.1"
+version: "2.45.0"

portainer/updater.json

@@ -1,9 +1,9 @@
 {
   "github_havingasset": "true",
-  "last_update": "2026-08-01",
+  "last_update": "2026-08-29",
   "repository": "alexbelgium/hassio-addons",
   "slug": "portainer",
   "source": "github",
   "upstream_repo": "portainer/portainer",
-  "upstream_version": "2.44.0"
+  "upstream_version": "2.45.0"
 }

portainer_agent/CHANGELOG.md

@@ -1,3 +1,7 @@
+ 
+## 2.44.0.2 (2026-08-29)
+- Update to latest version from portainer/agent
+- Upstream tag : sts
 ## 2.44.0.1 (2026-08-24)
 
 - Rebuild to pick up a fix in the shared entrypoint: when `ha_entrypoint.sh` runs as PID 1, as it does in this add-on, it now populates `/run/s6/container_environment`, so a script carrying a `#!/usr/bin/with-contenv` shebang gets a populated environment including `SUPERVISOR_TOKEN` instead of failing at its shebang. Nothing shipped in this add-on still uses that shebang (the healthcheck moved to plain bash in 2.44.0), so this changes nothing about the agent itself; it matters for a `script.sh` added by the user, and it is the add-on that build-tests the shared change

portainer_agent/config.yaml

@@ -41,4 +41,4 @@ schema:
 slug: portainer_agent
 udev: true
 url: https://github.com/alexbelgium/hassio-addons
-version: "2.44.0.1"
+version: "2.44.0.2"

portainer_agent/updater.json

@@ -1,9 +1,9 @@
 {
   "github_tagfilter": "sts",
-  "last_update": "23-08-2026",
+  "last_update": "2026-08-29",
   "repository": "alexbelgium/hassio-addons",
   "slug": "portainer_agent",
   "source": "dockerhub",
   "upstream_repo": "portainer/agent",
-  "upstream_version": "alpine-sts"
+  "upstream_version": "sts"
 }

prowlarr/CHANGELOG.md

@@ -1,4 +1,12 @@
  
+## 2.6.2.5583.12 (2026-08-29)
+- Update to latest version from linuxserver/docker-prowlarr (changelog : https://github.com/linuxserver/docker-prowlarr/releases)
+- Upstream tag : nightly-2.6.2.5583-ls12
+ 
+## 2.6.2.5581.11 (2026-08-29)
+- Update to latest version from linuxserver/docker-prowlarr (changelog : https://github.com/linuxserver/docker-prowlarr/releases)
+- Upstream tag : nightly-2.6.2.5581-ls11
+ 
 ## 2.6.2.5558.10 (2026-08-22)
 - Update to latest version from linuxserver/docker-prowlarr (changelog : https://github.com/linuxserver/docker-prowlarr/releases)
 - Upstream tag : nightly-2.6.2.5558-ls10

prowlarr/config.yaml

@@ -110,4 +110,4 @@ schema:
 slug: prowlarr
 udev: true
 url: https://github.com/alexbelgium/hassio-addons
-version: "2.6.2.5558.10"
+version: "2.6.2.5583.12"

prowlarr/updater.json

@@ -1,10 +1,10 @@
 {
   "github_beta": "true",
   "github_fulltag": "true",
-  "last_update": "2026-08-22",
+  "last_update": "2026-08-29",
   "repository": "alexbelgium/hassio-addons",
   "slug": "prowlarr",
   "source": "github",
   "upstream_repo": "linuxserver/docker-prowlarr",
-  "upstream_version": "nightly-2.6.2.5558-ls10"
+  "upstream_version": "nightly-2.6.2.5583-ls12"
 }

sabnzbd/CHANGELOG.md

@@ -1,4 +1,7 @@
  
+## 5.1.2 (2026-08-29)
+- Update to latest version from linuxserver/docker-sabnzbd (changelog : https://github.com/linuxserver/docker-sabnzbd/releases)
+ 
 ## 5.1.1.3 (2026-08-25)
 - Fixed ingress returning `403 External internet access denied` when Home Assistant is reached from outside the local network. SABnzbd's `verify_xff_header` option, which is on by default, refuses any request whose `X-Forwarded-For` chain contains a non-local address, so the proxy no longer forwards that header.
 

sabnzbd/config.yaml

@@ -106,4 +106,4 @@ schema:
 slug: sabnzbd
 udev: true
 url: https://github.com/alexbelgium/hassio-addons
-version: "5.1.1.3"
+version: "5.1.2"

sabnzbd/updater.json

@@ -1,8 +1,8 @@
 {
-  "last_update": "2026-08-22",
+  "last_update": "2026-08-29",
   "repository": "alexbelgium/hassio-addons",
   "slug": "sabnzbd",
   "source": "github",
   "upstream_repo": "linuxserver/docker-sabnzbd",
-  "upstream_version": "5.1.1"
+  "upstream_version": "5.1.2"
 }

scrutiny/CHANGELOG.md

@@ -1,4 +1,7 @@
  
+## v1.70.0 (2026-08-29)
+- Update to latest version from Starosdev/scrutiny (changelog : https://github.com/Starosdev/scrutiny/releases)
+ 
 ## v1.69.1 (2026-08-22)
 - Update to latest version from Starosdev/scrutiny (changelog : https://github.com/Starosdev/scrutiny/releases)
  

scrutiny/config.yaml

@@ -113,4 +113,4 @@ schema:
 slug: scrutiny
 udev: true
 url: https://github.com/Starosdev/scrutiny
-version: "v1.69.1"
+version: "v1.70.0"

scrutiny/updater.json

@@ -1,10 +1,10 @@
 {
   "github_fulltag": "true",
-  "last_update": "2026-08-22",
+  "last_update": "2026-08-29",
   "paused": false,
   "repository": "alexbelgium/hassio-addons",
   "slug": "scrutiny",
   "source": "github",
   "upstream_repo": "Starosdev/scrutiny",
-  "upstream_version": "v1.69.1"
+  "upstream_version": "v1.70.0"
 }

scrutiny_fa/CHANGELOG.md

@@ -1,4 +1,7 @@
  
+## v1.70.0 (2026-08-29)
+- Update to latest version from Starosdev/scrutiny (changelog : https://github.com/Starosdev/scrutiny/releases)
+ 
 ## v1.69.1 (2026-08-22)
 - Update to latest version from Starosdev/scrutiny (changelog : https://github.com/Starosdev/scrutiny/releases)
  

scrutiny_fa/config.yaml

@@ -45,4 +45,4 @@ schema:
 slug: scrutiny_fa
 udev: true
 url: https://github.com/Starosdev/scrutiny
-version: "v1.69.1"
+version: "v1.70.0"

scrutiny_fa/updater.json

@@ -1,10 +1,10 @@
 {
   "github_fulltag": "true",
-  "last_update": "2026-08-22",
+  "last_update": "2026-08-29",
   "paused": false,
   "repository": "alexbelgium/hassio-addons",
   "slug": "scrutiny_fa",
   "source": "github",
   "upstream_repo": "Starosdev/scrutiny",
-  "upstream_version": "v1.69.1"
+  "upstream_version": "v1.70.0"
 }

sonarr/CHANGELOG.md

@@ -1,4 +1,7 @@
  
+## 4.0.19.3007 (2026-08-29)
+- Update to latest version from linuxserver/docker-sonarr (changelog : https://github.com/linuxserver/docker-sonarr/releases)
+ 
 ## 4.0.19.3001 (2026-08-11)
 - Update to latest version from linuxserver/docker-sonarr (changelog : https://github.com/linuxserver/docker-sonarr/releases)
 - Upstream tag : develop-4.0.19.3001-ls184

sonarr/Dockerfile

@@ -16,7 +16,7 @@
 
 ARG BUILD_FROM
 ARG BUILD_VERSION
-ARG BUILD_UPSTREAM="4.0.19.3001"
+ARG BUILD_UPSTREAM="4.0.19.3007"
 FROM ${BUILD_FROM}
 
 ##################

sonarr/config.yaml

@@ -110,4 +110,4 @@ schema:
 slug: sonarr_nas
 udev: true
 url: https://github.com/alexbelgium/hassio-addons/tree/master/sonarr
-version: "4.0.19.3001"
+version: "4.0.19.3007"

sonarr/updater.json

@@ -1,9 +1,9 @@
 {
   "github_beta": true,
-  "last_update": "2026-08-11",
+  "last_update": "2026-08-29",
   "repository": "alexbelgium/hassio-addons",
   "slug": "sonarr",
   "source": "github",
   "upstream_repo": "linuxserver/docker-sonarr",
-  "upstream_version": "4.0.19.3001"
+  "upstream_version": "4.0.19.3007"
 }

webtop_kde/CHANGELOG.md

@@ -1,3 +1,7 @@
+ 
+## 4.16.0.95 (2026-08-29)
+- Update to latest version from linuxserver/docker-webtop (changelog : https://github.com/linuxserver/docker-webtop/releases)
+- Upstream tag : 4.16-r0-ls95
 ## 4.16.0.94 (2026-08-01)
 
 - Version renamed from `4.16-r0-ls94`, which Home Assistant could not order and therefore could not reliably offer as an update: every number of the previous version is kept, as a section of its own. The addon itself and the upstream version it tracks are unchanged

webtop_kde/Dockerfile

@@ -2,11 +2,11 @@
 #  ALEXBELGIUM'S DOCKERFILE  #
 #============================#
 #           _.------.
-#       _.-`    ('>.-`"4.16-r0-ls94""-.
+#       _.-`    ('>.-`"4.16-r0-ls95""-.
 # '.--'`       _'`   _ .--.)
 #    -'         '-.-';`   `
 #    ' -      _.'  ``'--.
-#        '---`    .-'"4.16-r0-ls94"`
+#        '---`    .-'"4.16-r0-ls95"`
 #               /`
 #=== Home Assistant Addon ===#